Hanto API requests use bearer authentication. Send your API key in the Authorization header.
Authorization: Bearer sk_live_REPLACE_WITH_YOUR_KEY
Create a key
Create API keys inside the Hanto app from API keys.
When a key is created, Hanto shows the plaintext value once. Copy it into your secret manager before leaving the page. After that, the app shows only a masked key identifier.
Revoke a key
Revoke a key from API keys when it is no longer needed or may have been exposed.
Requests using a revoked key return:
{
"error": "unauthorized"
}
Use the key with every public API request:
curl https://api.hanto.ai/api/v1/person/enrich \
-H "Authorization: Bearer sk_live_REPLACE_WITH_YOUR_KEY" \
-H "Content-Type: application/json" \
-d '{"email":"person@gmail.com"}'
Store API keys as secrets. Do not commit them, paste them into client-side code, or expose them in logs.